Re: rsync corrupted MAC

2011-10-10 Thread Louis Mamakos

On Oct 10, 2011, at 2:38 PM, Larry Rosenman wrote:

> On 10/10/2011 10:47 AM, John Baldwin wrote:
>> On Sunday, October 09, 2011 5:06:26 pm Larry Rosenman wrote:
>>> Any ideas on which side or what might be broke here?
>>> 
>>> ler/MAIL-ARCHIVE/2008/12/INBOX
>>> Corrupted MAC on input.
>>> Disconnecting: Packet corrupt
>>> rsync: connection unexpectedly closed (33845045 bytes received so far)
>> [receiver]
>>> rsync error: error in rsync protocol data stream (code 12) at io.c(605)
>> [receiver=3.0.9]
>>> rsync: connection unexpectedly closed (1450 bytes received so far)
>> [generator]
>>> rsync error: unexplained error (code 255) at io.c(605) [generator=3.0.9]
>> I've had somewhat similar issues (ssh getting corruption in its data stream)
>> when a NIC in my netbook was corrupting packet data when it ran at 1G (it
>> worked fine at 10/100).  Pyun eventually fixed the issue by applying enough
>> workarounds (it was likely a hardware bug in the NIC's chipset).  However, it
>> wasn't easy to debug unfortunately. :(
>> 
> Any ideas on where to start?
> 
> from the 8.2 box (tbh.lerctr.org in the script):
> 
> 8.2->PIX->Provider->Internet->Motorola SBG6580 (Time-Warner)->Trendnet 
> TEG-160WS Gig switch->9.0 box (borg.lerctr.org).
> 
> So, where do I start?

I'd turn off IP / TCP / UDP checksum offloading on your NIC if it supports it, 
and see if you are getting network layer checksum errors.  If the IP checksum 
is wrong, then it happened on the last hops between the NIC and memory or 
across the previous network hop.



___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


Re: arp: unknown hardware address

2008-02-22 Thread Louis Mamakos
The Address Resolution Protocol (ARP) contains an address format  
identifiers as part of the frame format.  This is so it could be used  
as generalized solution to discover different types of addresses on a  
broadcast network.  For IP, the address format in the frame ought to  
be (as I recall) 0x0800 to denote an IPv4 protocol addresses and  
0x0001 to denote Ethernet hardware addresses.  It seems like some  
other host on your network has likely emitted malformed ARP messages.


UTSL: /usr/src/sys/netinet/if_ether.c:arpintr()

louie

On Feb 22, 2008, at 5:09 AM, [EMAIL PROTECTED] wrote:


Hi

I`ve got the same messages on FreeBSD 6-STABLE (tracked every second
week). I think that somebody is using default MAC address on network.

Best regards


Hi!

This morning, I found this in the daily periodic mail from a RELENG_7
machine:

+arp: unknown hardware address format (0x)
+arp: unknown hardware address format (0x)
+arp: unknown hardware address format (0x)
+arp: unknown hardware address format (0x)
+arp: unknown hardware address format (0x)

I checked my yesterdays' logs and found:

Feb 21 20:56:39 bellona dhcpd: DHCPREQUEST for 192.168.178.20 from
00:18:de:a4:b
8:6a via aue0: wrong network.
Feb 21 20:56:39 bellona dhcpd: DHCPNAK on 192.168.178.20 to
00:18:de:a4:b8:6a vi
a aue0
Feb 21 20:56:40 bellona kernel: arp: unknown hardware address format
(0x)
Feb 21 20:56:40 bellona kernel: Feb 21 20:56:40 bellona kernel: arp:
unknown hardware address format (0x)
Feb 21 20:56:42 bellona kernel: arp: unknown hardware address format
(0x)
Feb 21 20:56:47 bellona last message repeated 3 times
Feb 21 20:56:51 bellona dhcpd: DHCPDISCOVER from 00:18:de:a4:b8:6a  
via

aue0
Feb 21 20:56:51 bellona kernel: Feb 21 20:56:51 bellona dhcpd:
icmp_echorequest 192.168.20.249: Operation not permitted
Feb 21 20:56:52 bellona dhcpd: DHCPOFFER on 192.168.20.249 to
00:18:de:a4:b8:6a (lp4) via aue0


7.0-PRERELEASE FreeBSD 7.0-PRERELEASE #8: Sun Feb 17 19:13:08 CET  
2008


The network the dhcp client was requesting (192.168.178.20) is not  
mine,

dhcpd rejected that address and offered another one. But why does
FreeBSD complain about the bad hardware address?

Any explanations?

Volker
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "[EMAIL PROTECTED] 
"





---
Jan Sebosik
[EMAIL PROTECTED]

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "[EMAIL PROTECTED] 
"




___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: busybox and small scripting languages on FreeBSD ? (was Re: 80 Mb / enough for 7.x? OK to delete /stand/ and /modules/ ?)

2008-08-03 Thread Louis Mamakos


On Aug 2, 2008, at 6:56 PM, Luigi Rizzo wrote:


On Sat, Aug 02, 2008 at 11:39:20AM -0700, Sam Leffler wrote:
...
I've been looking at nanobsd for a couple of applications and  
working to
reduce the footprint of the images without hacking special rules.   
With

...
If we're ever to consider building images for flash parts (not  
compact

flash) then we'll need to do a lot of work to pare down the bloat--or
replace current apps w/ special purpose replacements a la busybox  
(not

something I find appealing).


related to this thread -- does anyone have experience in trying
to build busybox on FreeBSD ?

Also, what would you suggest as a small scripting language to be used
in this kind of platform for implementing CGI scripts (and preferably
able to use sockets/select) ?

The various perl/python/php and friend are in the 10MB range once you
pick up a little bit of libraries (sockets etc) and the tangle of
modules they require; awk (which is present in busybox) is ok-ish for
some things, but doing
I/O and calling external programs with it is very unfriendly;
javascript/spidermonkey is on the 500KB range but it doesn't have
a library to play with sockets...


I'd also suggest looking at Lua, as someone else mentioned.  It's BSD
licensed, and written explicitly for small footprint, embedded  
applications.

There's a port to the Lego Mindstorms controller, for example.  The
Lua language is written in ANSI C, and has a small set of well defined
interfaces to the OS for opening files, memory allocation, etc.

There are a number of web based Lua application environments; google for
"Lua Kepler" for one such example.  There's also a couple of Wiki  
platforms

written in Lua.

I think of Lua as the sort of tool you might use these days as  
compared to

Tcl some years ago.

It also would be suitable for replacing FORTH in /boot/loader as  
something
that's still small and compact enough, with many fewer sharp edges  
exposed

to users..

louie

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: mountd doean`t start when ZFS is enabled.

2009-05-19 Thread Louis Mamakos
Perhaps there's no /etc/exports file?  While exporting shared zfs file  
systems doesn't require this, it looks like /etc/rc.d/mountd requires  
the file to be present.



On May 19, 2009, at 2:33 PM, Zaphod Beeblebrox wrote:


2009/5/18 Михаил Кипа 

I have two servers with Identical FreeBSD7.2 system. On both I have  
such

config in /etc/rc.conf:
rpcbind_enable="YES"
rpc_lockd_enable="YES"
rpc_statd_enable="YES"
nfs_client_enable="YES"
nfs_server_enable="YES"
nfs_server_flags="-u -t -n 5 -h 192.168.x.y"
mountd_flags="-r"



You might also want to post the result of zfs get all | grep sharenfs

Mountd can be refusing to start if there are syntax errors in those
declarations.
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org 
"




___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


Re: ZFS MFC heads up

2009-05-21 Thread Louis Mamakos
FYI, I just did an upgrade of my RELENG_7 machine with the new ZFS  
merged in, and it seems to have gone mostly trouble-free.  I noticed  
one weirdness that could be confusion on my part - I'm no longer  
seeing snapshots when I do 'zfs list'.  There's a UI change in the zfs  
command, and to see snapshots, you have to explicitly ask for them:


zfs list -t snapshot

scared me there for a moment..

Thanks for all the great work on ZFS in FreeBSD to everyone involved.   
I look forward to really beating on this now in RELENG_7.


Any pointers to running multiple jails with ZFS?  I was looking for  
something like a union-mount capability for ZFS.  I don't necessarily  
need a jail to run divergent /bin, /usr/local, etc. just the  
isolation.  Making a clone doesn't exactly do the same thing..


louie

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


Re: ZFS MFC heads up

2009-05-21 Thread Louis Mamakos


On May 21, 2009, at 11:22 AM, Freddie Cash wrote:

On Thu, May 21, 2009 at 7:12 AM, Louis Mamakos   
wrote:
FYI, I just did an upgrade of my RELENG_7 machine with the new ZFS  
merged
in, and it seems to have gone mostly trouble-free.  I noticed one  
weirdness
that could be confusion on my part - I'm no longer seeing snapshots  
when I

do 'zfs list'.  There's a UI change in the zfs command, and to see
snapshots, you have to explicitly ask for them:


It's a known change made to the zfs tool somewhere around v11 or so.
It's documented in all the Solaris notes about ZFS.  You have to
explicitily list the type of dataset(s) you want to list with "zfs
list".  By default, it only shows filesystems.  You even have to use
-t if you want to list volumes.

Reading up on the Solaris docs for ZFS is quite enlightening.  :)


We might want to update the zfs(1) man page in the examples for the
'list' subcommand.  I think I actually like the new behavior, it was  
just

a little unnerving at first to have the snapshots be missing after
the MFC.

louie
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


Re: ZFS NAS configuration question

2009-05-30 Thread Louis Mamakos
I built a system recently with 5 drives and ZFS.  I'm not booting off  
a ZFS root, though it does mount a ZFS file system once the system has  
booted from a UFS file system.  Rather than dedicate drives, I simply  
partitioned each of the drives into a 1G partition, and another  
spanning the remainder of the disk.  (In my case, all the drives are  
the same size).  I boot off a gmirror of two partitions off the first  
two drives, and then use the other 3 1G partitions on the remaining 3  
drives as swap partitions.  I take the larger partitions on each of  
the 5 drives and organize them into a raidz2 ZFS pool.


My needs are more relating to integrity of the data vs. surviving a  
disk failure without crashing.  So, I don't bother to mirror swap  
partitions to keep running in the event of a drive failure.  But  
that's a decision for you to make.


It's not too tricky to do the install; I certainly didn't need to burn  
a custom CD or anything.  There are some fine cookbooks on the net  
that talk about techniques.  For me, the tricky bit was setting up the  
geom gmirror, which you could probably do from the fixit CD or  
something.  I just did a normal install on the first drive to get a  
full FreeBSD running, and then "built" the mirrors on a couple of  
other drives, did an install on the mirror ("make installworld  
DESTDIR=/mnt") and then just moved the drives around.  And I did a  
full installation in the 1G UFS gmirror file system, just to have an  
full environment to debug from, if necessary, rather than just a /boot.


Just some ideas..

louie


On May 30, 2009, at 2:41 PM, Dan Naumov wrote:


Hey

I am not entirely sure if this question belongs here or to another
list, so feel free to direct me elsewhere :)

Anyways, I am trying to figure out the best way to configure a NAS
system I will soon get my hands on, it's a Tranquil BBS2 (
http://www.tranquilpc-shop.co.uk/acatalog/BAREBONE_SERVERS.html ).
which has 5 SATA ports. Due to budget constraints, I have to start
small, either a single 1,5 TB drive or at most, a small 500 GB system
drive + a 1,5 TB drive to get started with ZFS. What I am looking for
is a configuration setup that would offer maximum possible storage,
while having at least _some_ redundancy and having the possibility to
grow the storage pool without having to reload the entire setup.

Using ZFS root right now seems to involve a fair bit of trickery (you
need to make an .ISO snapshot of -STABLE, burn it, boot from it,
install from within a fixit environment, boot into your ZFS root and
then make and install world again to fix the permissions). To top that
off, even when/if you do it right, not your entire disk goes to ZFS
anyway, because you still do need a swap and a /boot to be non-ZFS, so
you will have to install ZFS onto a slice and not the entire disk and
even SUN discourages to do that. Additionally, there seems to be at
least one reported case of a system failing to boot after having done
installworld on a ZFS root: the installworld process removes the old
libc, tries to install a new one and due to failing to apply some
flags to it which ZFS doesn't support, leave it uninstall, leaving the
system in an unusable state. This can be worked around, but gotchas
like this and the amount of work involved in getting the whole thing
running make me really lean towards having a smaller traditional UFS2
system disk for FreeBSD itself.

So, this leaves me with 1 SATA port used for a FreeBSD disk and 4 SATA
ports available for tinketing with ZFS. What would make the most sense
if I am starting with 1 disk for ZFS and eventually plan on having 4
and want to maximise storage, yet have SOME redundancy in case of a
disk failure? Am I stuck with 2 x 2 disk mirrors or is there some 3+1
configuration possible?

Sincerely,
- Dan Naumov
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org 
"




___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


Re: ZFS NAS configuration question

2009-05-30 Thread Louis Mamakos

The system that I built had 5 x 72GB SCA SCSI drives.  Just to keep my
own sanity, I decided that I'd configure the fdisk partitioning  
identically
across all of the drives.  So that they all have a 1GB slice and and a  
71GB

slice.

The drives all have identical capacity, so the second 71GB slice ends up
the same on all of the drives.  I actually end up using glabel to create
a named unit of storage, so that I don't have to worry about getting
the drives inserted into the right holes..

I figured that 1GB wasn't too far off for both swap partitions (3 of  
'em)

plus a pair mirrored to boot from.

I haven't really addressed directly swapping another drive of a slightly
different size, though I've spares and I could always put a larger drive
in and create a slice at the right size.

It looks like this, with all of the slices explicitly named with glabel:

r...@droid[41] # glabel status
Name  Status  Components
 label/boot0 N/A  da0s1
label/zpool0 N/A  da0s2
 label/boot1 N/A  da1s1
label/zpool1 N/A  da1s2
 label/swap2 N/A  da2s1
label/zpool2 N/A  da2s2
 label/swap3 N/A  da3s1
label/zpool3 N/A  da3s2
 label/swap4 N/A  da4s1
label/zpool4 N/A  da4s2

And the ZFS pool references the labeled slices:

r...@droid[42] # zpool status
  pool: z
 state: ONLINE
 scrub: none requested
config:

NAME  STATE READ WRITE CKSUM
z ONLINE   0 0 0
  raidz2  ONLINE   0 0 0
label/zpool0  ONLINE   0 0 0
label/zpool1  ONLINE   0 0 0
label/zpool2  ONLINE   0 0 0
label/zpool3  ONLINE   0 0 0
label/zpool4  ONLINE   0 0 0

errors: No known data errors

And swap on the other ones:

r...@droid[43] # swapinfo
Device  1024-blocks UsedAvail Capacity
/dev/label/swap4 10441920  1044192 0%
/dev/label/swap3 10441920  1044192 0%
/dev/label/swap2 10441920  1044192 0%
Total   31325760  3132576 0%

This is the mirrored partition that the system actually boots from.   
This
maps physically to da0s1 and da1s1.  The normal boot0 and boot1/boot2  
and

loader operate typically on da0s1a which is really /dev/mirror/boota:

r...@droid[45] # gmirror status
   NameStatus  Components
mirror/boot  COMPLETE  label/boot0
   label/boot1

r...@droid[47] # df -t ufs
Filesystem  1024-blocks  UsedAvail Capacity  Mounted on
/dev/mirror/boota   1008582680708   24718873%/bootdir

The UFS partition eventually ends up getting mounted on /bootdir:

r...@droid[51] # cat /etc/fstab
# DeviceMountpoint  FStype  Options  
DumpPass#
zfs:z/root  /   zfs rw   
0   0
/dev/mirror/boota   /bootdirufs rw,noatime   
1   1
/dev/label/swap2noneswapsw   
0   0
/dev/label/swap3noneswapsw   
0   0
/dev/label/swap4noneswapsw   
0   0
/dev/acd0   /cdrom  cd9660  ro,noauto
0   0


But when /boot/loader on the UFS partition reads what it thinks is / 
etc/fstab,
which eventually ends up in /bootdir/etc/fstab, the root file system  
that's mounted

is the ZFS filesystem at z/root:


r...@droid[52] # head /bootdir/etc/fstab
# DeviceMountpoint  FStype  Options  
DumpPass#
z/root  /   zfs rw   
0   0


And /boot on the ZFS root is symlinked into the UFS filesystem, so it  
gets updated

when a make installworld happens:

r...@droid[53] # ls -l /boot
lrwxr-xr-x  1 root  wheel  12 May  3 23:00 /boot@ -> bootdir/boot

louie



On May 30, 2009, at 3:15 PM, Dan Naumov wrote:


Is the idea behind leaving 1GB unused on each disk to work around the
problem of potentially being unable to replace a failed device in a
ZFS pool because a 1TB replacement you bought actually has a lower
sector count than your previous 1TB drive (since the replacement
device has to be either of exact same size or bigger than the old
device)?

- Dan Naumov


On Sat, May 30, 2009 at 10:06 PM, Louis Mamakos   
wrote:
I built a system recently with 5 drives and ZFS.  I'm not booting  
off a ZFS
root, though it does mount a ZFS file system once the system has  
booted from
a UFS file system.  Rather than dedicate drives, I simply  
partitioned each

of the drives into a 1G partition




___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


Re: Upgrading from 6.4 to 7.2

2009-07-31 Thread Louis Mamakos


On Jul 31, 2009, at 9:43 AM,  > wrote:
Are you sure the kernel does not install? I have recently source- 
upgraded a bunch of systems straight from 6-STABLE to 7-STABLE,  
constantly observed this error, but kernel and modules did install  
properly, and the machines booted up as smoothly as expected. Most  
of them with gmirror, BTW.


Helge


Also beware that gmirror in RELENG_7 will upgrade the metadata in your  
mirror when you boot.  This could be an issue if you need to revert to  
a RELENG_6 kernel with the older gmirror.  I've done a source upgrade  
(months ago, though) from 6.x to 7.x successfully, though.


Louis Mamakos

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"


Re: tcpdump, rl, sis, fxp and multicast problems

2007-01-21 Thread Louis Mamakos

Matthew X. Economou wrote:

not very important but wouldn't it be better to set the checksum
to 0 instead of some arbitrary (?) and confusing value then ?


No, as not setting the checksum is a (minor) optimization.  Setting that
field to any arbitrary constant means at least one completely
unnecessary CPU instruction per datagram.

Best wishes,
Matthew 



However, since it is a 1's complement checksum, there is a distinguished 
value (all zero bits) that you could set the checksum field to that 
wouldn't occur for a normal computed checksum.  Since the presence of a 
checksum is mandatory for TCP, you can use this trick and external 
software could "know" that it's a distinguished value.


This is similar to UDP, where the protocol allows the "no checksum 
present" case by setting the checksum field to all zero bits.


I suspect the overhead isn't the CPU instruction, but the memory 
reference.  If you manipulate the checksum field to the distinguished 
value at the time the other fields are written, they they'll all get 
written out to memory when the cache line is flushed.  You've already 
got to initialize the Urgent Pointer field, which is the other 16 bits 
in the same 32 bit word.  If you were really clever, you could make a 
union to cover both fields and zero both out in the same store instruction.


louie

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: ipf Kernel Panic log.. w/ Vonage linksys RT31P2, 5.4 Stable, IPF + IPNAT

2005-06-13 Thread Louis Mamakos
The Vonage RT31P2 does not talk H.323, and it's not necessary to do 
anything other than plain vanilla NAT to have it work through a 
firewall.  That is, no port forwarding, no SIP payload re-writing, etc. 
 Just plain vanilla NAT for both the SIP signaling and the RTP payload 
will be all that's necessary.


I use ipfw with my Vonage service, but there's nothing special that I do 
for NAT.  I don't do ipf..


Louis Mamakos


Vladimir Botka wrote:

Hello,
if your "Vonage linksys RT31P2" talks H323 try /usr/ports/net/gatekeeper 
in proxy mode.


Cheers,
Vladimir Botka

On Sun, 12 Jun 2005, Damon Hopkins wrote:


I can reproduce this very easily.. I pick up my phone and make a call
Current Setup

\--

I've tried various nap rules and ipf filter settings.. here are the
current mappings and setup.. the kernel is GENERIC w/ the debuggong
stuff put in it.
 IPNAT RULES 
map vr0 10.69.0.0/24 -> 0/32 proxy port ftp ftp/tcp
map vr0 10.69.0.0/24 -> 0/32

- IPF RULES -
pass in quick on lo0 proto tcp from any to any flags S keep state
pass in quick on lo0 proto udp from any to any keep state
pass in quick on lo0 proto icmp from any to any keep state
pass in quick on lo0 all keep state
pass out quick on lo0 proto tcp from any to any flags S keep state
pass out quick on lo0 proto udp from any to any keep state
pass out quick on lo0 proto icmp from any to any keep state
pass out quick on lo0 all keep state

pass in quick on rl0 proto tcp from any to any flags S keep state
pass in log first quick on rl0 proto udp from any to any keep state
pass in log first quick on rl0 proto icmp from any to any keep state 
keep frags

pass in quick on rl0 all keep state
pass out quick on rl0 proto tcp from any to any flags S keep state
pass out log first quick on rl0 proto udp from any to any keep state
pass out log first quick on rl0 proto icmp from any to any keep state
keep frags
pass out quick on rl0 all keep state

pass in quick on vr0 proto tcp from any to any flags S keep state keep 
frags

pass in quick on vr0 proto udp from any to any keep state keep frags
pass in log first quick on vr0 proto icmp from any to any keep state
keep frags
pass in quick on vr0 all keep state keep frags
pass out quick on vr0 proto tcp from any to any flags S keep state keep
frags
pass out quick on vr0 proto udp from any to any keep state keep frags
pass out log first quick on vr0 proto icmp from any to any keep state
keep frags
pass out quick on vr0 all keep state keep frags

pass in quick on ng0 proto tcp from any to any flags S keep state
pass in quick on ng0 proto udp from any to any keep state
pass in log first quick on ng0 proto icmp from any to any keep state
pass in quick on ng0 all keep state
pass out quick on ng0 proto tcp from any to any flags S keep state
pass out quick on ng0 proto udp from any to any keep state
pass out log first quick on ng0 proto icmp from any to any keep state
pass out quick on ng0 all keep state

 MORE ng rules form my other VPNS 
I've also just tried to pass everything
pass in quick on vr0 all
pass out quick on vr0 all

but that didn't help any

I've notices a lot of UDP traffic from the linksys adapter durring a 
phone call..


Thanks Guys.. I hope this gets fixes real fast cause my old number 
goes away in a few days and this is not going to be fun.. I can't put 
the linksys adapter in front of the firewall because it doesn't route 
my VPN's.. we use MPD and bgpd (zebra)



Later,
Damon Hopkins

- DEBUG OUTPUT --
Fatal trap 12: page fault while in kernel mode
fault virtual address= 0xc
fault code= supervisor read, page not present
instruction pointer= 0x8:0xc0651550
stack pointer= 0x10:0xd3d46aec
frame pointer= 0x10:0xd3d46af8
code segment= base 0x0, limit 0xfm type 0x1b
= DPL 0, pres 1, def32 1, gran 1
processor eflags= interrupt enabled, resume, IOPL = 0
current process= 27 (swi1:net)
[thread pid 27 tid 100021 ]
Stopped at m_copydata+0x28:movl0xc(%esi),%eax
db> examine
m_copydata+0x28:290c468b
db> trace
Tracing pid 27 tid 100021 td 0xc15a4180
mcopydata(c17fa400,0,38,c193abc0,0) at m_copydata+0x28
ipllog(0,d3d46bc8,d3d46b50,d3d46b48,d3d46b40) at ipllog+0x1f1
ipflog(105819,c17fa450,d3d46bc8,c17fa400,0) at ipflog+0x18f
fr_check(c17fa450,14,c16c6000,0,d3d46c70) at fr_check+0xc6c
fr_check_wrapper(0,d3d46c70,c16c6000,1,0) at fr_check_wrapper+0x2a
pfil_run_hooks(c08fa5c0,d3d46cbc,c16c600,1,0) at pfil_run_hooks+0xeb
ip_input(c17fa400) at ip_input+0x211
netisr_processqueue(c08f9858) at netisr_processqueue+0x9f
swi_net(0) at swi_net+0xee
ithread_loop(c159a500,d3d46d38) at ithread_loop+0x151
fork_exit(c0609f4c,c159a500,d3d46d38) at fork_exit+0x74
fork_trampol